Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/K3GonXg9Dh3Mw4ZGsHIulvsTlWA.roa
File: K3GonXg9Dh3Mw4ZGsHIulvsTlWA.roa (raw, json)
Hash identifier: RqzXh2BglTCxuPwnLjrh3WKMa11zRPVe3EnRQ9enGXo=
Subject key identifier: 2B:71:A8:9D:78:3D:0E:1D:CC:C3:86:46:B0:72:2E:96:FB:13:95:60
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194126384731E6BA4CB9B8E70D38C2CE63E
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/K3GonXg9Dh3Mw4ZGsHIulvsTlWA.roa
Signing time: Sun 29 Dec 2024 12:28:19 +0000
ROA not before: Sun 29 Dec 2024 12:28:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 5.102.104.0/22 maxlen: 24
31.186.180.0/22 maxlen: 24
82.163.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:63:84:73:1e:6b:a4:cb:9b:8e:70:d3:8c:2c:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 29 12:28:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b71a89d783d0e1dccc38646b0722e96fb139560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:4a:34:23:4e:99:f9:d7:ef:00:e5:df:cb:
06:8d:60:4e:d6:df:33:a0:d6:04:3b:60:b5:f7:02:
66:36:0c:2f:58:20:35:7c:94:36:f8:ba:64:93:2a:
d7:87:84:91:f8:cf:d0:06:5c:bb:fa:df:0f:ee:0b:
94:52:4e:ef:15:3e:9e:06:c5:ef:24:1f:43:3a:ee:
5e:13:34:0b:53:70:49:d5:1c:2c:72:c0:d4:0f:2d:
94:b8:92:25:ad:07:a8:78:1d:ad:02:3d:2d:d9:1f:
df:86:70:a3:95:9b:a9:45:2b:26:0a:23:87:80:75:
07:a2:41:b4:28:d4:17:80:4e:99:7f:53:2a:2b:6d:
42:99:ae:df:db:d5:58:71:25:a7:00:b7:b4:6c:32:
1c:ea:40:c8:ae:77:a1:b6:ae:41:0c:05:e1:63:a8:
93:59:3a:6f:93:50:38:d8:03:7d:14:e7:b9:a0:50:
4c:99:28:15:6f:4b:90:32:13:42:a2:b9:a0:5d:c7:
a0:0b:cf:eb:0d:80:65:ea:0f:7b:9e:fc:92:9d:88:
dc:4b:f2:d3:eb:00:fc:f3:e7:a8:db:62:1b:7a:93:
f0:5a:49:5b:56:df:f9:97:72:1c:cd:9d:e8:9e:b9:
2e:ac:c9:df:55:c5:1f:4f:6e:0a:b7:25:72:f0:43:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:A8:9D:78:3D:0E:1D:CC:C3:86:46:B0:72:2E:96:FB:13:95:60
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/K3GonXg9Dh3Mw4ZGsHIulvsTlWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.104.0/22
31.186.180.0/22
82.163.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:eb:d9:c9:45:c5:96:c1:fa:c4:b3:c9:62:a6:9e:47:35:43:
ff:49:b2:32:04:47:69:32:cc:92:a7:ab:04:ef:3e:3a:94:be:
d2:3f:e0:fc:4d:bb:c3:1d:4d:7d:9d:86:69:c4:e7:fd:b3:a5:
d3:df:2d:0f:33:e2:db:f3:dc:f0:f4:03:b7:2b:a0:40:70:3c:
35:de:56:65:ab:4b:7c:c7:75:8d:8e:01:0a:2f:27:2d:f6:39:
ac:f5:55:5a:9b:5b:5e:c5:ff:31:a6:2f:8d:6c:df:4c:aa:04:
35:d1:95:05:fc:73:8b:9b:c8:87:db:e9:19:7e:2a:e9:68:13:
74:f3:3b:7f:18:03:c4:43:43:0e:1b:43:ee:7d:64:c8:1d:f3:
a5:7b:62:96:1f:5b:47:08:af:a1:d5:2e:41:73:b2:0e:03:8b:
8b:c3:14:cb:fc:bc:16:6c:0b:3d:83:c5:a3:49:da:7e:ed:98:
2d:34:a3:b6:da:79:c4:28:4a:dc:05:52:4f:0f:fb:68:77:78:
73:36:87:ca:e5:18:0b:aa:71:d7:d8:54:6b:0d:85:d3:29:3e:
63:f7:ea:4a:62:c7:aa:22:00:f7:67:e2:00:d9:be:db:1d:b0:
0d:09:fb:50:7a:cb:a1:8b:1c:61:e8:f4:0d:d1:0a:61:88:95:
7e:90:23:7a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQSY4RzHmuky5uOcNOMLOY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjQxMjI5MTIyODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjcxYTg5ZDc4M2QwZTFkY2NjMzg2NDZiMDcyMmU5NmZiMTM5NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtllKNCNOmfnX7wDl38sGjWBO1t8z
oNYEO2C19wJmNgwvWCA1fJQ2+LpkkyrXh4SR+M/QBly7+t8P7guUUk7vFT6eBsXv
JB9DOu5eEzQLU3BJ1RwscsDUDy2UuJIlrQeoeB2tAj0t2R/fhnCjlZupRSsmCiOH
gHUHokG0KNQXgE6Zf1MqK21Cma7f29VYcSWnALe0bDIc6kDIrnehtq5BDAXhY6iT
WTpvk1A42AN9FOe5oFBMmSgVb0uQMhNCormgXcegC8/rDYBl6g97nvySnYjcS/LT
6wD88+eo22IbepPwWklbVt/5l3IczZ3onrkurMnfVcUfT24KtyVy8EN0hwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCtxqJ14PQ4dzMOGRrByLpb7E5VgMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvSzNHb25YZzlEaDNNdzRaR3NISXVsdnNUbFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBWZoAwQC
H7q0AwQDUqNgMA0GCSqGSIb3DQEBCwUAA4IBAQB/69nJRcWWwfrEs8lipp5HNUP/
SbIyBEdpMsySp6sE7z46lL7SP+D8TbvDHU19nYZpxOf9s6XT3y0PM+Lb89zw9AO3
K6BAcDw13lZlq0t8x3WNjgEKLyct9jms9VVam1texf8xpi+NbN9MqgQ10ZUF/HOL
m8iH2+kZfirpaBN08zt/GAPEQ0MOG0PufWTIHfOle2KWH1tHCK+h1S5Bc7IOA4uL
wxTL/LwWbAs9g8WjSdp+7ZgtNKO22nnEKErcBVJPD/tod3hzNofK5RgLqnHX2FRr
DYXTKT5j9+pKYseqIgD3Z+IA2b7bHbANCftQesuhixxh6PQN0QphiJV+kCN6
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:05 2025 by rpki-client